Skip to content
OpenAdvisories
Low · 3.7 CVE-2019-4214 EUVD-2019-13821GHSA-pw64-x6q9-r7wg

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow…

Published Nov 22, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: SmartCloud Analytics

Description

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 159185.

Affected products

VendorProductAffectedFixed
IBM SmartCloud Analytics 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5 —

References